Cloudflare still needs first-class KMS and IAM
The point is blunt: secrets storage is not key management, and serverless platforms eventually hit the same security-primitives wall
Cloudflare needs an equivalent of AWS KMS. Key management is hard. Storing a key in secrets store is not enough. This, plus IAM Roles are their biggest gaps imo.